Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/F34FF6B69C3B11EABC59DA11C4F9AE02.roa
File:                     F34FF6B69C3B11EABC59DA11C4F9AE02.roa (raw, json)
Hash identifier:          OLxb4szEa42sVAsVtahDW9OACGax9w0AvXegNjux5TA=
Subject key identifier:   37:7B:A2:AE:6D:8D:56:3A:E1:11:FE:C8:D4:E1:C4:4F:61:F2:8A:97
Certificate issuer:       /CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
Certificate serial:       110C
Authority key identifier: 5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/F34FF6B69C3B11EABC59DA11C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:12:40 +0000
ROA not before:           Fri 06 Feb 2026 17:14:56 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     138586
IP address blocks:        2404:9ec0:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl
                          rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:23:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4364 (0x110c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123D9C, serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
        Validity
            Not Before: Feb  6 17:14:56 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a48198-eb24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0d:0a:2e:65:01:6e:6d:97:dd:64:34:26:21:
                    f4:04:45:83:a3:53:cd:cb:cd:44:a2:98:30:e7:0f:
                    05:57:b1:7d:ec:5c:0f:1f:ee:ac:7a:26:14:2a:ae:
                    2c:9c:35:59:84:85:35:dd:21:ca:4d:ec:47:97:dc:
                    ae:a3:16:bd:49:0b:49:b7:c9:00:d8:59:44:42:6b:
                    c1:4e:4e:a4:65:27:7a:2e:4f:bc:3d:a7:5c:28:4a:
                    28:dc:00:86:07:f7:1b:c3:b4:10:48:1e:2c:26:5c:
                    0a:5c:a8:e0:4a:3a:59:73:24:e6:1a:4e:9d:05:c2:
                    a0:f8:cf:d8:81:62:54:57:76:84:ae:07:c1:e4:a0:
                    0a:ff:ee:46:f1:1a:d9:5a:9d:54:72:24:0c:58:67:
                    c7:e4:ed:58:cc:d8:7a:4c:63:b5:a0:6f:e7:66:44:
                    8f:9e:cf:c4:fd:95:34:89:6e:e5:3b:ca:32:ec:5a:
                    57:b1:b2:df:1e:64:a1:12:d5:45:7d:71:82:13:bd:
                    6b:64:5b:c5:d2:da:58:41:f2:0a:1f:61:28:a1:9f:
                    c2:be:b3:eb:2b:dc:62:69:a3:2c:83:31:82:78:92:
                    47:10:27:66:4d:b1:77:68:39:84:49:47:1f:eb:eb:
                    24:48:d3:50:ce:77:de:f8:70:88:7a:85:d7:a2:45:
                    71:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:7B:A2:AE:6D:8D:56:3A:E1:11:FE:C8:D4:E1:C4:4F:61:F2:8A:97
            X509v3 Authority Key Identifier:
                keyid:5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/F34FF6B69C3B11EABC59DA11C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:9ec0:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         79:d2:99:6c:c8:62:69:42:c7:99:81:45:f4:46:4a:2e:44:23:
         57:b8:aa:e1:ab:9b:10:32:af:d2:c8:c8:05:e0:87:5e:fb:3c:
         ee:29:18:8e:d8:fb:3c:72:00:7d:5a:d4:63:4c:32:c7:b5:77:
         4b:85:7f:e1:e5:4a:c5:4b:f9:f1:20:53:c1:7b:12:96:a0:6f:
         9d:d2:bb:82:e5:f4:e1:08:67:f4:1f:e8:d9:62:00:83:f8:3a:
         3b:6b:c4:ce:08:22:9f:12:e0:3f:9e:1f:9d:ab:17:2d:a3:7a:
         ba:69:d0:79:a8:c6:9d:90:5e:17:66:62:c3:6d:4a:3c:36:13:
         93:e7:b3:5f:0a:1c:76:74:e3:4e:7d:21:b9:c8:21:ef:64:39:
         6e:30:8b:d4:43:e6:9a:ce:ea:62:f3:5c:1c:2a:1c:f4:04:65:
         61:31:a9:5e:88:9b:9e:ff:39:4a:b7:c2:52:2f:d3:37:35:cd:
         86:f0:f9:a4:e7:e4:6a:a4:d8:e3:8c:ca:28:eb:fd:b8:c0:a8:
         7c:dd:8f:3e:e4:04:16:e9:f1:e9:3e:3c:9e:8a:58:88:3e:96:
         30:fa:54:58:53:ae:93:b9:29:b2:33:e0:e5:c1:6f:c7:97:99:
         31:12:5e:bf:7d:88:b9:fc:a2:b8:62:b7:93:93:c7:be:dc:bb:
         45:38:a6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:32:27 2026 by rpki-client